$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: 8pBVXFjYl4pLTojzeTNNuXR8I4o4NXTcdCVtmoMUYd0= Subject key identifier: 67:F0:84:57:A8:C5:04:1B:F1:B1:BC:D9:34:9C:3C:29:FE:D0:28:BF Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 0471 Signing time: Sat 31 May 2025 00:54:59 +0000 Manifest this update: Sat 31 May 2025 00:54:59 +0000 Manifest next update: Sat 07 Jun 2025 00:54:59 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: 9poa0+lvVhP970iYHpH5b+TASlyEqzE+aPZvcq5UetM=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: May 31 00:54:59 2025 GMT Not After : Jun 7 00:54:59 2025 GMT Subject: CN=683a5363-68c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:af:47:d3:56:f1:b3:16:f1:46:c4:44:ba: 16:10:b8:db:ba:de:bb:a1:d0:fa:38:af:52:8a:2f: ce:49:c3:84:1a:b2:25:51:80:24:2e:b5:77:b5:26: 0f:83:6f:5e:ac:3c:06:41:d6:38:9b:af:33:8c:93: 3c:c4:8f:28:30:40:5a:a4:b9:9f:83:8b:86:72:57: 2d:00:6a:22:fb:e1:67:05:a1:90:b9:44:ee:61:7b: 9c:86:36:c5:ea:65:9f:17:66:5d:b7:8b:a2:20:8e: 0b:92:67:de:1d:ae:00:87:f8:3f:dc:95:c1:7c:77: 67:36:26:e7:96:37:c6:b3:f1:86:1e:38:da:86:74: b3:83:53:03:65:cd:57:7c:94:a2:e9:25:d5:f4:40: 9a:21:31:25:50:24:d4:92:2b:48:e3:83:72:c4:4a: a8:ad:ef:cf:07:03:2c:d9:61:3d:13:6e:a9:81:70: 77:e3:b8:7e:83:83:e6:3f:f8:76:fa:40:d1:e6:6e: 1d:08:20:4c:c7:87:63:6a:8c:de:a2:cf:2f:90:cc: 48:e9:ec:5e:a1:64:40:40:2c:9b:88:b7:01:12:bd: 09:94:01:0c:6d:f4:0e:0b:66:19:24:c0:73:58:cc: 2d:5c:ce:29:19:08:a7:3f:44:6b:d9:cd:76:ba:2a: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F0:84:57:A8:C5:04:1B:F1:B1:BC:D9:34:9C:3C:29:FE:D0:28:BF X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:16:24:91:66:df:e5:cd:ec:d2:85:fc:69:2c:b8:de:48:3a: d4:00:43:b7:fc:58:d4:cb:a6:44:7c:1f:91:02:08:a5:13:64: 50:cd:dd:63:f5:4d:24:e8:20:d2:91:25:c4:fc:40:95:3e:9f: 90:82:1b:9b:a6:a3:5e:a6:5b:d3:28:04:20:8d:25:3b:be:25: 7d:b9:7c:d8:4d:de:2c:be:6f:f6:11:1e:b6:ed:ac:2b:4d:af: 1c:f0:9e:bf:ec:e0:9d:b0:fe:17:60:fb:cf:f5:62:72:b2:a7: 11:6b:64:a8:26:54:b4:3d:55:0b:a6:a8:cb:33:ca:09:22:f3: 29:2e:ef:95:38:9b:2f:49:02:f4:d9:e4:49:b2:a0:a5:cf:0c: 07:73:4c:55:fe:a4:f1:74:65:1c:d2:16:26:be:7a:3c:fa:78: ee:d9:72:30:70:2e:ad:2c:6b:ec:da:91:c3:d2:39:03:f3:f2: d7:f7:25:3e:79:d5:48:80:44:c7:b2:31:94:3c:61:1b:bf:bf: 5d:3b:73:ff:f3:b4:2a:b0:ab:8c:02:e1:75:4a:82:64:80:67: 5a:a4:f4:55:e2:d5:78:a7:50:fd:79:7e:bc:19:d7:1c:e8:9d: da:8a:59:dd:4e:d8:dd:91:55:3a:d4:05:f1:8e:b3:b9:53:d8: c4:31:11:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNTMxMDA1NDU5WhcNMjUwNjA3MDA1NDU5WjAYMRYwFAYD VQQDEw02ODNhNTM2My02OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJSvR9NW8bMW8UbERLoWELjbut67odD6OK9Sii/OScOEGrIlUYAkLrV3tSYP g29erDwGQdY4m68zjJM8xI8oMEBapLmfg4uGclctAGoi++FnBaGQuUTuYXuchjbF 6mWfF2Zdt4uiII4LkmfeHa4Ah/g/3JXBfHdnNibnljfGs/GGHjjahnSzg1MDZc1X fJSi6SXV9ECaITElUCTUkitI44NyxEqore/PBwMs2WE9E26pgXB347h+g4PmP/h2 +kDR5m4dCCBMx4djaozeos8vkMxI6exeoWRAQCybiLcBEr0JlAEMbfQOC2YZJMBz WMwtXM4pGQinP0Rr2c12uiqvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfwhFeo xQQb8bG82TScPCn+0Ci/MB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQFiSRZt/lzezShfxpLLjeSDrUAEO3/FjUy6ZEfB+RAgilE2RQzd1j 9U0k6CDSkSXE/ECVPp+QghubpqNeplvTKAQgjSU7viV9uXzYTd4svm/2ER627awr Ta8c8J6/7OCdsP4XYPvP9WJysqcRa2SoJlS0PVULpqjLM8oJIvMpLu+VOJsvSQL0 2eRJsqClzwwHc0xV/qTxdGUc0hYmvno8+nju2XIwcC6tLGvs2pHD0jkD8/LX9yU+ edVIgETHsjGUPGEbv79dO3P/87QqsKuMAuF1SoJkgGdapPRV4tV4p1D9eX68Gdcc 6J3ailndTtjdkVU61AXxjrO5U9jEMRGw -----END CERTIFICATE-----Generated at Sat May 31 16:43:53 2025 by rpki-client